[ https://bro-tracker.atlassian.net/browse/BIT-698?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jon Siwek updated BIT-698: -------------------------- Description: The way the {{mime_}} and {{http_entity_}} events are structure is a mess: - First, I think we should have only a single set of events for all MIME data. - the {{mime_}} events don't come with {{is_orig}}. - {{http_header}} vs. {{mime_one_header}} - {{http_entity_data}} delivers segments of size {{http_entity_data_delivery_size}} while {{mime_entity_data}} delivers complete entities (and {{mime_segment_data}} delivers segments…) - There are further inconsistencies I didn't record. was: The way the `{{mime_*}} and {{http_entity_*}} events are structure is a mess: \\- First, I think we should have only a single set of events for all MIME data. \\- the }}{{mime_*}}{{ events don't come with }}{{is_orig}}{{. \\- }}{{http_header}}{{ vs. }}{{mime_one_header}}{{ \\- }}{{http_entity_data}}{{ delivers segments of size }}{{http_entity_data_delivery_size}}{{ while }}{{mime_entity_data}}{{ delivers complete entities (and }}{{mime_segment_data}}` delivers segments…) \\- There are further inconsistencies I didn't record. > HTTP vs MIME events > ------------------- > > Key: BIT-698 > URL: https://bro-tracker.atlassian.net/browse/BIT-698 > Project: Bro Issue Tracker > Issue Type: Problem > Components: Bro > Reporter: Robin Sommer > Labels: analyzer, cleanup > Fix For: 2.5 > > > The way the {{mime_}} and {{http_entity_}} events are structure is a mess: > - First, I think we should have only a single set of events for all MIME data. > - the {{mime_}} events don't come with {{is_orig}}. > - {{http_header}} vs. {{mime_one_header}} > - {{http_entity_data}} delivers segments of size > {{http_entity_data_delivery_size}} while {{mime_entity_data}} delivers > complete entities (and {{mime_segment_data}} delivers segments…) > - There are further inconsistencies I didn't record. -- This message was sent by Atlassian JIRA (v6.4-OD-15-055#64014) _______________________________________________ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev